TGViewer
Qubes OS Qubes OS @qubesos · 1.37K subscribers
Post #1210 107
Qubes Canary 048
https://www.qubes-os.org/news/2026/09/09/canary-048/

We have published Qubes Canary 048 (https://github.com/QubesOS/qubes-secpack/blob/f1378920daaaad3e338fa18aa972da074bc45aef/canaries/canary-048-2026.txt). The text of this canary and its accompanying cryptographic signatures are reproduced below. For an explanation of this announcement and instructions for authenticating this canary, please see the end of this announcement.

Qubes Canary 048


---===[ Qubes Canary 048 ]===---


Statements
-----------

The Qubes security team members who have digitally signed this file [1]
state the following:

1. The date of issue of this canary is September 09, 2026.

2. There have been 118 Qubes security bulletins published so far.

3. The Qubes Master Signing Key fingerprint is:

427F 11FD 0FAA 4B08 0123 F01C DDFA 1A3E 3687 9494

4. No warrants have ever been served to us with regard to the Qubes OS
Project (e.g. to hand out the private signing keys or to introduce
backdoors).

5. We plan to publish the next of these canary statements in the first
fourteen days of December 2026. Special note should be taken if no new
canary is published by that time or if the list of statements changes
without plausible explanation.


Special announcements
----------------------

None.


Disclaimers and notes
----------------------

We would like to remind you that Qubes OS has been designed under the
assumption that all relevant infrastructure is permanently compromised.
This means that we assume NO trust in any of the servers or services
which host or provide any Qubes-related data, in particular, software
updates, source code repositories, and Qubes ISO downloads.

This canary scheme is not infallible. Although signing the declaration
makes it very difficult for a third party to produce arbitrary
declarations, it does not prevent them from using force or other means,
like blackmail or compromising the signers' laptops, to coerce us to
produce false declarations.

The proof of freshness provided below serves to demonstrate that this
canary could not have been created prior to the date stated. It shows
that a series of canaries was not created in advance.

This declaration is merely a best effort and is provided without any
guarantee or warranty. It is not legally binding in any way to anybody.
None of the signers should be ever held legally responsible for any of
the statements made here.


Proof of freshness
-------------------

Wed, 09 Sep 2026 06:09:30 +0000

Source: DER SPIEGEL - International (https://www.spiegel.de/international/index.rss)
Fake Jewish Lineage: The Passport Scheme that Exploited Germany’s Nazi History
BYD, Geely, Xpeng: Germany’s Vaunted Auto Industry in Dire Straits Amid Chinese Surge
Amodei vs. Altman: How the Race for AI Dominance Is Increasing the Risks
Boats from Eastern Libya: How Europe Is Bowing to a Libyan Warlord on Migration
Moaning for the Mainland: How Taiwan Satisfies China's Lust for Pornography

Source: NYT > World News (https://rss.nytimes.com/services/xml/rss/nyt/World.xml)
AfD’s Far Right Win Puts New Pressure on Germany’s Leader Merz
Chinese Ship Takes Arctic Shortcut: Smart Business? Or a Political Flex?
Israeli Allies Ban Trade With Settlements as U.K. Cites ‘Ethnic Cleansing’
Saudi Arabia and Yemen’s Houthis Edge Back to the Brink of War
Carney Says Retaliation Against U.S. Tariffs Was Unavoidable

Source: BBC News (https://feeds.bbci.co.uk/news/world/rss.xml)
US strikes Iranian oil tankers as Tehran targets American base in Jordan
Paul Adams: British-Israeli relations at lowest ebb in decades
US slaps import ban on Canadian alcohol, motorbikes and other goods
'Constantly on my mind' - 9/11 agony endures for bereaved, 25 years on
South Park creators rename show 'South America' in apparent dig at Trump

Source: Blockchain.info
000000000000000000017721d9b2add64d85980a3bb8587851798bb854c3d514


Footnotes
----------
More from @qubesos
  1. Sep 19, 2026View the full list of known bugs affecting Qubes 4.3 (https://github.com/QubesOS/qubes-iss…
  2. Sep 19, 2026Qubes OS 4.3.2-rc1 is available for testing https://www.qubes-os.org/news/2026/09/18/qubes…
  3. Sep 16, 2026HEI0Vg2Gd3lAewa34zxicNsHlHh7OKsGFI027BxdIpZoEwbLzMThfA0+TH6t/JsN UEzh9lXD0cpuJIxHe0bSGrJL7…
  4. Sep 16, 2026part of the file name in most cases. And even when they do control the full path, many use…
  5. Sep 16, 2026QSB-119: Potential attacker-controlled format string in qvm-open-in-vm https://www.qubes-o…
  6. Sep 9, 2026What are some signs of an unhealthy canary? Here is a non-exhaustive list of examples: Dea…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →